anomalia is a plugin for nfsen that detects anomalies in TCP connections based on the flow analysis.